CVE-2018-8728

2018-03-1515:29:00

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in “kontena master login --remote” code display, as demonstrated by /code#code= in a URI.

CPENameOperatorVersion
kontenaeq0.8.4
kontenaeq0.11.2
kontenaeq0.7.1
kontenaeq0.7.3
kontenaeq0.11.3
kontenaeq0.11.5
kontenaeq0.5.0
kontenaeq0.11.7
kontenaeq0.7.2
kontenaeq0.8.1